www.bryanisd.org

Issued by R3

About this certificate

This digital certificate with serial number 04:e5:56:8f:0a:b8:7f:c7:c1:f1:fd:4a:e1:ae:dc:b8:27:fb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.bryanisd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e5:56:8f:0a:b8:7f:c7:c1:f1:fd:4a:e1:ae:dc:b8:27:fb
Serial Number (int): 426488862075465791992536395035969714661371
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0f:66:21:f6:88:d0:18:6d:b2:12:1a:1c:ab:a6:2d:15:ac:b5:13:29
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 27:fd:f0:ed:97:94:21:d1:43:32:f4:5e:dc:a1:0c:82:85:3d:b7:9e
Fingerprint (sha256): 63:97:51:0a:2a:a3:b1:ff:3e:df:47:18:83:63:e5:6a:23:44:a6:85:78:df:20:dc:6e:ec:53:53:ab:55:60:12

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.bryanisd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bryanisd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bryanisd.org

Other certificates including the domain name bryanisd.org

(limited to 100 certificates)
www.chms.mx
acecharterhigh.org
admindavila.bryanisd.org
mitchell.bryanisd.org
admin.shs.seafordbluejays.org
seafordhighschool.seafordbluejays.org
abramfriedmanoc.org
admin.bme.manorisd.net
abramfriedmanoc.org
admin.dms.manorisd.net
houston.bryanisd.org
abramfriedmanoc.org
hac.bryanisd.org
admin.hbuhsd.edu
rayburn.bryanisd.org
admin.dms.manorisd.net
long.bryanisd.org
*.bryanisd.org
carver.bryanisd.org
rudderhs.bryanisd.org
athlosaustin.org
admin.cca-denver.org
hms.frenship.us
*.bryanisd.org
adminrayburn.bryanisd.org
www.collegeachievegreaterasburyparkcharterschool.org
gradespeed2.bryanisd.org
admin.dms.manorisd.net
www.infinityhs.org
pgp.bryanisd.org
admin.cca-denver.org
davila.bryanisd.org
acsaregionxv.org
admin.cca-denver.org
acsaregionxv.org
hrbisd.bryanisd.org
admin.mshs.manorisd.net
educationfoundation.bryanisd.org
www.hancockhs.org
fannin.bryanisd.org
acecharterhigh.org
eduphoria.bryanisd.org
rayburn.bryanisd.org
acsaregionxv.org
*.bryanisd.org
www.nhstitans.org
henderson.bryanisd.org
*.bryanisd.org
johnson.bryanisd.org
admin.educationfoundation.bryanisd.org
davila.bryanisd.org
abramfriedmanoc.org
abramfriedmanoc.org
admin.cca-denver.org
navarro.bryanisd.org
bonham.bryanisd.org
*.bryanisd.org
sfaustin.bryanisd.org
neal.bryanisd.org
bryanhs.bryanisd.org
admin.cca-denver.org
tmsa.org
hs.saisd.us
www.bryanisd.org
bonham.bryanisd.org
admin.cca-denver.org
www.buffsci.org
johnson.bryanisd.org
admin.acecharterhigh.org
delbosquemexico.com
abramfriedmanoc.org
sfaustin.bryanisd.org
*.bryanisd.org
admin.daviswolves.org
admin.nhstitans.org
acecharterhigh.org
crockett.bryanisd.org
holyfamilyhs.com
bowen.bryanisd.org
admin.dz.aceroschools.org
ross.bryanisd.org
acsaregionxv.org
admin.cca-denver.org
hanak12school.org
*.bryanisd.org
eq4.equitasacademy.org
mcharris.bryanisd.org
jones.bryanisd.org
admin.cca-denver.org
adulted.sanjacinto.k12.ca.us
admin.cca-denver.org
branch.bryanisd.org
acecharterhigh.org
eq.equitasacademy.org
long.bryanisd.org
destiny.bryanisd.org
bryanisd.org
bryanhs.bryanisd.org
eisner.caminonuevo.org
bryanisd.org

Certificate

The complete raw certificate details for www.bryanisd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvzmrMwRHsJ4AG9hZ/WyZ
z6Hqcx/SP2ckiJKfJsgquATb6YCVaQ2k/VIr34QavDFzDKaBTShWguzHlj6o6R71
VrZgsUNvjj/Wz32+Ak1AV4RIlbdzVBSyseHZ7kuKCb1FPT3OzJ8LCnOwQSGrCW9t
CU2OUcY5n3bmbDD2wUiygs8AR4FfQwKNTXEVkegmlllF1K/p3kckm3FJ808wVE64
2BnlObviDokVVZaMSdB675DJR2dWU6upmCundwI3sc5pakzP4nuihprv3nlWEDNN
ACw5kZjJcecbDmhPWyXkUUNKStYYhvWK5Xpm2SE933ldJ3saed21PyIt7ZV15YHL
twirVwVCJhOGV1bpx0jhGc3Dy52DZqbvgK6hg2v6Lt6swNAz1IQ8ORi9mPe7i5Ux
B3Bh3gieyldx11VRRkrS+4HWUApZKH7oN+EsgaVy3IYTE9xAp8Qv/IXyQXNpokbO
BvFZ5DTJUVXUNPrUzxVn0AjXJ9QlVWz8qVQ99M0qGgSUlZxB9rH/vPBNpsU8wBFh
lqPyUvN6SkZGPtSKNeEKJOO7wM8idtG4QYN7X2jjvI/fXJRdJc9Jwdds9sy4fzfq
lS0sqIJwA6CfPXLfXu3mPhVkGv9tUZQ1Qfb5ng/oPIHDhEZ7MEUJfb1VwdnVdPot
wiRPzQ0oEYVZMzsGpStRM6ECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426488862075465791992536395035969714661371
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 01:23:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-04 01:23:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bryanisd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 780131032470118896800615229955692600230596406963990309893428349551685956264017197371400165073601856453532050014762517149755793747466387759968063356019629461070550778835207483080161867837645102524421850940951648687459269798005638750803981846677043102633767787153204038940032899832143729816788671074181099702370865573584282089661640280441886097280025645965938108496130960670525199860607462256233169065151408778732815311668978761608690679923517312618049362579040691917654495067379456874743933599042323307167361298445994201989437055276766244169467133019626467725373024650421096765735365055243005308492819269486102674654675466250338104955802370001377073058617725858190044714343574069822423112834396778155419990262177817246494763225447834384674815927505154890817217331820140073828070342184266101653369267999629804434359123193561742402095511064502138625540098940337847394864540032402936807891212749444985237777991258545487228318272197019217057520243281241037054795252349523812702477439002461642454762446141129075883696336622455639716051901952399840879629755138831207487078907408981098480552899785889432156518390077013628543948727457748121446513715426374428820670440899765340680653472031084200097016987153456487497673789976744784357951091617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0f6621f688d0186db2121a1caba62d15acb51329
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bryanisd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c37ca152a0000040300473045022100867d3831e51a9da740ecf51005061259710401556657f876eecaf00eccc2b7c702204dc17f9815debaec702b7f99ba9a07f367db1889e9d46138f4776bdbf8f17f71007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c37ca14da00000403004830460221008417f276e146059c8124b04871f3d3e6436f64557923df531da0badd8eeae692022100bf1d5767d2c2cbc3f1c24c205984cd234d8c1db4008186990bd9d80bfff0c4f9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008fb73c794435306db5383835529d39267b40fde2e79ed0e7f5368f01c34ec1eee5e7ce98d6c68c3880b54a0e42a805d54680a31fc01d1828c34a99568aca90abdabc6604d54386b5e4089a5cfd933782440585d314daac23f58a412d67436d02ab5d05160034acd620f5fed9e67fbdd23eed9b105db2f90c1fed4aa169f3f49a725b60acef6584a2f6fa2af9931edcb226e87b1d8162f88b35106e128a04d33a8586b52db271c336fbce5f159affe5e9baf53f25f2e747c80b406a448fa02296e3d5267a8d754d9cda6574bd5ad9e06b0c4e18c1df1f07bd01798f06d1fa72a4c3789b096ea97a1bc577c052b1e24e8475434d05873121b3cd59757c2781e848